WHAT IS CLAIMED IS: 



1 1 . A method for recovering a Basic Input Output System (BIOS) image in a 

2 computer system, comprising the steps of: 

3 executing recovery code stored in a nonvolatile memory in response to 

4 a recover BIOS command; 

5 rewriting a first BIOS image in said nonvolatile memory with a second 

6 BIOS image stored in a protected portion of a nonvolatile storage unit in 

7 response to said recovery code; and 

8 updating said system using said rewritten second BIOS image in said 

9 nonvolatile memory. 

1 2. The method of claim 1 , wherein said first BIOS image is rewritten with 

2 said second BIOS image if said first BIOS image is determined to be corrupted. 

1 3. The method of claim 1, wherein said recover BIOS command is 

2 generated in response to a recover BIOS request received by said computer 

3 system over a communication link. 

1 4. The method of claim 3, wherein said recover BIOS request is part of a 

2 secure data packet received by said computer system via said communication 

3 link. 

1 5. The method of claim 4, wherein said secure data packet has data which 

2 must first be authenticated by said recovery code before said first BIOS image 

3 is rewritten with said second BIOS image. 

1 6. The method of claim 1, wherein said nonvolatile memory is an 

2 electronically erasable programmable read only memory (EEPROM). 
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1 7. The method of claim 1, wherein said communication link comprises a 

2 local area network (LAN) and a wide area network (WAN). 

1 8. The method of claim 1, wherein said nonvolatile storage unit is an 

2 integrated drive electronics (IDE) disc drive. 

1 9. The method of claim 1 , wherein said second BIOS image was written 

2 onto said protected partition of said nonvolatile storage unit at the time of 

3 manufacture. 

1 10. The method of claim 2, wherein said first BIOS image is determined to be 

2 corrupted by comparing a signature of said first BIOS image to a signature 

3 received in said secure data packet. 

1 11. The method of claim 4, wherein said secure data packet is a Wake on 

2 LAN packet. 

1 1 2. The method of claim 1 , wherein said second BIOS image is written onto 

2 said protected partition of said nonvolatile storage unit under control of an 

3 operating system executing an update BIOS image program on said system. 
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1 13. An apparatus for recovering a BIOS image for a computer system 

2 comprising: 

3 a nonvolatile memory for storing recovery code and a first BIOS image; 

4 a nonvolatile read/write storage system having a protectable storage 

5 partition, said partition storing a second BIOS image; 

6 an execution unit to execute said recovery code stored in said nonvolatile 

7 memory in response to a recover BIOS command; 

8 a write circuit for rewriting said first BIOS image in said nonvolatile 

9 memory with said second BIOS image stored in said protected partition of said 

10 nonvolatile storage unit in response to said recovery code; and 

11 an update circuit for booting up said system using said second BIOS 

12 image written in said nonvolatile memory. 

1 1 4. The apparatus of claim 1 3 further comprising a receiver circuit to receive 

2 a recover BIOS request via a communication link. 

1 1 5. The apparatus of claim 1 3, wherein said first BIOS image is rewritten with 

2 said second BIOS image if said first BIOS image is determined to be corrupted. 

1 16. The apparatus of claim 14, wherein said recover BIOS command is 

2 generated in response to said recover BIOS request received by said receiver 

3 circuit over said communication link. 

1 1 7. The apparatus of claim 1 6, wherein said recover BIOS request is part of 

2 a secure data packet received via said communication link. 

1 18. The apparatus of claim 17, wherein said secure data packet has data 

2 which must be first authenticated by said recovery code before said first BIOS 

3 image is rewritten with said second BIOS image. 
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1 19. The apparatus of claim 13, wherein said nonvolatile memory is an 

2 electronically erasable programmable read only memory (EEPROM). 

1 20. The apparatus of claim 14, wherein said communication link comprises 

2 a local area network (LAN) and a wide area network (WAN). 

1 21. The apparatus of claim 13, wherein said nonvolatile storage unit is an 

2 integrated drive electronics (IDE) disc drive. 

1 22. The apparatus of claim 1 3, wherein said second BIOS image was written 

2 onto said protected partition of said nonvolatile storage unit at the time of 

3 manufacture. 

1 23. The apparatus of claim 1 5, wherein said first BIOS image is determined 

2 to be corrupted by comparing a signature of said first BIOS image to a signature 

3 received in said secure data packet. 

1 24. The apparatus of claim 17, wherein said secure data packet is a Wake 

2 on LAN packet. 
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1 25. A data processing system comprising: 

2 a central processing unit (CPU); 

3 a random access memory (RAM); 

4 a communications adapter coupled to a communication link; 

5 an I/O adapter coupled to non volatile read/write storage system, said 

6 nonvolatile read/write storage system (hard drive) having a protectable storage 

7 partition, said partition storing a second BIOS image; 

8 a nonvolatile electronically erasable programmable read only memory 

9 (EEPROM); and 

10 a bus system coupling said CPU to said EEPROM, said communications 

11 adapter, said I/O adapter, and said RAM, wherein said CPU comprises: 

12 circuitry for executing said recovery code stored in a nonvolatile memory 

13 in response to a recover BIOS command; 

14 circuitry for rewriting said first BIOS image stored in said nonvolatile 

15 memory with said second BIOS image stored in said protected partition of said 

16 nonvolatile storage unit in response to said recovery code; and 

17 circuitry for booting up said system using said second BIOS image written 

18 in said nonvolatile memory. 

1 26. The data processing system of claim 25 further comprising a receiver 

2 circuit to receive a recover BIOS request via a communication link. 

1 27. The data processing system of claim 25, wherein said first E3IOS image 

2 is rewritten with said second BIOS image if said first BIOS image is determined 

3 to be corrupted. 

1 28. The data processing system of claim 26, wherein said recover BIOS 

2 command is generated in response to said recover BIOS request received by 

3 said receiver circuit over said communication link. 
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1 29. The data processing system of claim 27, wherein said recover BIOS 

2 request is part of a secure data packet received via said communication link. 

1 30. The data processing system of claim 29, wherein said secure data packet 

2 has data which must be first authenticated by said recovery code before said 

3 first BIOS image is rewritten with said second BIOS image. 

1 31. The data processing system of claim 25, wherein said nonvolatile 

2 memory is an electronically erasable programmable read only memory 

3 (EEPROM). 

1 32. The data processing system of claim 25, wherein said communication link 

2 comprises a local area network (LAN) and a wide area network (WAN). 

1 33. The data processing system of claim 25, wherein said nonvolatile storage 

2 unit is an integrated drive electronics (IDE) disc drive. 

1 34. The data processing system of claim 25, wherein said second BIOS 

2 image is written onto said protected partition of said nonvolatile storage unit at 

3 the time of manufacture. 

1 35. The data processing system of claim 27, wherein said first BIOS image 

2 is determined to be corrupted by comparing a signature of said first BIOS image 

3 to a signature received in said secure data packet. 

1 36. The data processing system of claim 28, wherein said secure data packet 

2 is a Wake on LAN packet. 
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1 37. The data processing system of claim 25, wherein said second BIOS 

2 image is written onto said protected partition of said nonvolatile storage unit 

3 under control of an operating system executing an update BIOS image program 

4 on said system. 

1 38. A computer program product for recovering a BIOS image for a computer 

2 system, said computer program product embodied in a machine readable 

3 medium, including programming for a processor, said computer program 

4 comprising a program of instructions for performing the program steps of: 

5 executing recovery code stored in a nonvolatile memory in response to 

6 a recover BIOS command; 

7 rewriting a first BIOS image in said nonvolatile memory with a second 

8 BIOS image stored in a protected portion of a nonvolatile storage unit in 

9 response to said recovery code; and 

10 updating said system using said rewritten second BIOS image in said 

11 nonvolatile memory. 

1 39. The computer program product of claim 38, wherein said first BIOS image 

2 is rewritten with said second BIOS image if said first BIOS image is determined 

3 to be corrupted. 

1 40. The computer program product of claim 38, wherein said recover BIOS 

2 command is generated in response to a recover BIOS request received by said 

3 computer system over a communication link. 

1 41 . The computer program product of claim 40, wherein said recover BIOS 

2 request is part of a secure data packet received by said computer system via 

3 said communication link. 
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1 42. The computer program product of claim 41, wherein said secure data 

2 packet has data which must first be authenticated by said recovery code before 

3 said first BIOS image is rewritten with said second BIOS image. 

1 43. The computer program product of claim 38, wherein said nonvolatile 

2 memory is an electronically erasable programmable read only memory 

3 (EEPROM). 

1 44. The computer program product of claim 38, wherein said communication 

2 link comprises a local area network (LAN) and a wide area network (WAN). 

1 45. The computer program product of claim 38, wherein said nonvolatile 

2 storage unit is an integrated drive electronics (IDE) disc drive. 

1 46. The computer program product of claim 38, wherein said second BIOS 

2 image was written onto said protected partition of said nonvolatile storage unit 

3 at the time of manufacture. 

1 47. The computer program product of claim 39, wherein said first BIOS image 

2 is determined to be corrupted by comparing a signature of said first BIOS image 

3 to a signature received in said secure data packet. 

1 48. The computer program product of claim 41 , wherein said secure data 

2 packet is a Wake on LAN packet. 

1 49. The computer program product of claim 38, wherein said second BIOS 

2 image is written onto said protected partition of said nonvolatile storage unit 

3 under control of an operating system executing an update BIOS image program 

4 on said system. 
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